Enable Hyper-V via Intune with Remediation Scripts

The purpose of the blog post is to inform you how to enable Hyper-V via Intune on Windows 10 or Windows 11. Hyper-V is required for e.g. Windows Defender Credential guard, Application Guard and Application Control. You can enable Hyper-V in various ways, but I’ll explain in this blogpost the Proactive remediations Script method.

Requirements Intune:

  • Microsoft Intune license
  • Windows 10/11 Enterprise E3/E5 Or Microsoft 365 F3/E3/E5 license
  • Intune MDM managed device
  • Intune Admin or Global Admin Role
  • Endpoint Analytics

Requirements Device:

  • Hypervisor enabled in BIOS
  • Windows 10 Enterprise/Pro/Education min. 1709
  • 64bit processor
  • 4GB memory

Note. I use the PowerShell command Enable-WindowsOptionalFeature to enable Hyper-V via Intune. I’ve decided to use a PowerShell script and the built-in Proactive remediations method via Intune. If you want to enable Hyper-V via Intune but not want or able to use Remediation scripts, you can use the PowerShell method what I explain in another blog post.

You can also enable Hyper-V via the DISM Command and/or wrap the PowerShell script in a Win32 app.

My opinion is that the Apps section in Intune should only be used for installing applications and should not be misused for any other purpose.

PowerShell Scripts

PowerShell is commonly used for automating the management of systems. It will also be used to build, test, and deploy solutions, often in CI/CD environments. PowerShell is built on the .NET Common Language Runtime (CLR). All inputs and outputs are .NET objects.

More information about PowerShell can be found here

Remediation Scripts

Proactive remediations help you fix common issues before end-users notice issues. Proactive remediations are script packages that can detect and fix common issues on a user’s device. It can also be used for required configuration such. We will use proactive remediation to enable Hyper-V via Intune.

Each script package consists of a detection script, a remediation script, and metadata.

More information about Proactive remediation can be found here

How to verify Hyper-V Hardware compatibility

Almost all corporate device models support Hyper-V, especially the modern ones. If you want to be sure if your device supports Hyper-V. Start with checking the operating system and hardware requirements. After checking the requirements you have to check the compatibility. You can use the following CMD or PowerShell command: systeminfo. If all listed Hyper-V requirements have a value of Yes, your system can run the Hyper-V role. If any item returns No, check the requirements and make adjustments where possible.

CMD Verify Hyper-V Requirements

More information about Hyper-V requirements and compatibility can be found here

PowerShell script to be uploaded to Intune